Depending on scale, its usually easier to spin a new server than prevent malware.